
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier: Z8vmV7ik/X4yBCG9UA5+HHYYPXHJ8NDm/hwU+xH2QbE=
Subject key identifier: BD:C2:B0:4A:19:5F:27:DE:13:16:8E:85:20:BC:D1:1F:25:EE:24:18
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial: 3535
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number: 3535
Signing time: Fri 06 Mar 2026 14:21:45 +0000
Manifest this update: Fri 06 Mar 2026 14:21:45 +0000
Manifest next update: Fri 13 Mar 2026 14:21:45 +0000
Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: XNV5AdFBUclxdJuZyjYRggRBpsh80tofR5GP5cNxrJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13621 (0x3535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Validity
Not Before: Mar 6 14:21:45 2026 GMT
Not After : Mar 13 14:21:45 2026 GMT
Subject: CN=69aae2f9-e062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:9a:56:83:d4:91:77:c3:52:b4:19:7c:c1:
0d:9a:28:f4:52:df:fe:8a:1d:26:85:c6:a1:3e:71:
37:96:6b:69:9b:a4:8d:76:b4:f1:8d:ed:b3:65:6e:
01:92:61:28:c5:ca:72:3c:c7:2c:6b:56:65:43:cb:
09:51:7d:da:1b:33:da:93:98:4d:bc:56:a0:14:d2:
f3:5e:e6:95:79:b1:33:7e:00:71:50:5f:2b:c0:c3:
bf:0b:66:1e:52:e2:7e:45:27:6f:bb:91:fe:e0:55:
33:fd:56:94:20:33:0d:35:c4:e7:a6:6c:c1:2d:1c:
14:ff:99:6a:db:19:8d:0f:97:3d:63:2f:74:66:d5:
89:d3:02:a5:2a:5f:13:3d:6e:ce:08:5e:8b:50:36:
f6:a4:86:95:bb:d1:d1:71:03:d8:07:a9:b9:ab:1a:
8a:80:c5:d4:40:76:eb:33:de:49:6b:01:14:28:72:
ba:df:fa:33:66:e9:ba:ef:3e:2e:90:e4:9d:27:cd:
fc:a3:b4:eb:c7:c1:bd:37:6a:05:91:c4:e7:91:44:
10:0e:c1:69:64:b3:bd:cc:1e:ff:5b:4a:cb:57:37:
75:bb:03:b2:6b:18:08:40:af:33:ee:49:f1:eb:04:
8d:28:12:13:4c:7c:32:1a:be:43:b5:91:68:cf:43:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:B0:4A:19:5F:27:DE:13:16:8E:85:20:BC:D1:1F:25:EE:24:18
X509v3 Authority Key Identifier:
keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:be:a2:b7:db:c2:29:d6:7b:f1:e4:d1:2c:9f:51:59:02:
55:56:2a:e9:27:79:69:97:e9:57:74:96:e4:94:28:ec:a9:81:
c5:92:3e:78:19:ce:17:fb:21:09:ab:58:de:77:84:de:41:7e:
44:d8:9b:a9:28:e7:ec:da:e7:b3:9a:65:01:a3:28:4e:d5:36:
96:47:89:18:d3:24:a2:21:99:3c:c2:3a:b2:a3:a4:61:33:aa:
c5:f6:2f:b2:9b:a1:b9:b0:43:7b:34:d3:90:b1:77:96:90:26:
95:e4:ce:4d:1d:e9:b5:b0:c5:e9:ad:cd:0c:38:f1:f0:41:42:
7e:80:0e:10:50:8e:79:7b:d0:8a:4d:13:e9:d6:f3:0c:d3:51:
2d:e2:59:20:07:79:22:d2:27:77:fc:1d:4e:0b:c1:65:be:c4:
df:1b:7e:c1:95:28:4e:2e:33:38:d4:ef:e5:4d:ee:b8:28:98:
30:d1:08:ca:e9:37:c4:cb:19:9a:1d:07:9f:72:23:f5:3f:7c:
74:65:17:21:3e:ed:27:a4:5c:be:24:a5:b2:b4:da:0d:98:21:
53:84:6e:d0:41:c6:ee:84:6f:1e:0e:7f:bd:14:5a:48:33:ea:
12:9a:ca:d8:2b:46:93:b5:1d:78:2b:c1:c9:fc:14:24:68:c2:
b4:b1:7e:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKDFFQ0M5NzhBNTNFRjJCRTg4RTVGMjZBRDlCOEFCODgz
NzNEMTk3QTYwHhcNMjYwMzA2MTQyMTQ1WhcNMjYwMzEzMTQyMTQ1WjAYMRYwFAYD
VQQDEw02OWFhZTJmOS1lMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0/SaVoPUkXfDUrQZfMENmij0Ut/+ih0mhcahPnE3lmtpm6SNdrTxje2zZW4B
kmEoxcpyPMcsa1ZlQ8sJUX3aGzPak5hNvFagFNLzXuaVebEzfgBxUF8rwMO/C2Ye
UuJ+RSdvu5H+4FUz/VaUIDMNNcTnpmzBLRwU/5lq2xmND5c9Yy90ZtWJ0wKlKl8T
PW7OCF6LUDb2pIaVu9HRcQPYB6m5qxqKgMXUQHbrM95JawEUKHK63/ozZum67z4u
kOSdJ838o7Trx8G9N2oFkcTnkUQQDsFpZLO9zB7/W0rLVzd1uwOyaxgIQK8z7knx
6wSNKBITTHwyGr5DtZFoz0O/aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3CsEoZ
XyfeExaOhSC80R8l7iQYMB8GA1UdIwQYMBaAFB7Ml4pT7yvojl8mrZuKuINz0Zem
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9CRkVCMDAwODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkstaU9YeWF0bTRxNGczUFJs
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0hzeVhpbFB2Sy1pT1h5YXRtNHE0ZzNQUmw2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS9CRkVCMDAwODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkst
aU9YeWF0bTRxNGczUFJsNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL2m+orfbwinWe/Hk0SyfUVkCVVYq6Sd5aZfpV3SW5JQo7KmBxZI+eBnOF/sh
CatY3neE3kF+RNibqSjn7Nrns5plAaMoTtU2lkeJGNMkoiGZPMI6sqOkYTOqxfYv
spuhubBDezTTkLF3lpAmleTOTR3ptbDF6a3NDDjx8EFCfoAOEFCOeXvQik0T6dbz
DNNRLeJZIAd5ItInd/wdTgvBZb7E3xt+wZUoTi4zONTv5U3uuCiYMNEIyuk3xMsZ
mh0Hn3Ij9T98dGUXIT7tJ6RcviSlsrTaDZghU4Ru0EHG7oRvHg5/vRRaSDPqEprK
2CtGk7UdeCvByfwUJGjCtLF+rA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:36:13 2026 by rpki-client